Cisco IOS and IOS XE: known exploited vulnerabilities
Entries4
Ransomware-linked0
First added2021-11-03
Latest2025-09-29
EPSS compared
99.4%
98.9%
39.4%
2.4%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-20352 | Cisco IOS and IOS XE | 2025-09-29 | 39.4% | Unknown |
| CVE-2023-20109 | Cisco IOS and IOS XE | 2023-10-10 | 2.4% | Unknown |
| CVE-2017-3881 | Cisco IOS and IOS XE | 2022-03-25 | 98.9% | Unknown |
| CVE-2018-0171 | Cisco IOS and IOS XE | 2021-11-03 | 99.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.